linear-autopilot
Automates Linear task processing with Discord notifications and git sync for efficient kanban workflows.
Install this skill
Security score
The linear-autopilot skill was audited on Feb 15, 2026 and we found 18 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 10 | > **🔒 Security Note:** This skill mentions API keys, tokens, and webhook URLs because it teaches you how to set up integrations with Linear, Discord, and automation services (Make.com, Pipedream, Zap |
Webhook reference - potential data exfiltration
| 12 | Automated pipeline: **Linear → Webhook Service → Discord → Clawdbot → Git** |
Webhook reference - potential data exfiltration
| 25 | | **Zapier** | 100 tasks/month, 5 zaps, 15-min polling, **no webhooks** | ⚠️ Paid plan required for this workflow | |
Webhook reference - potential data exfiltration
| 29 | - **Pipedream** has instant webhooks but limited free credits that deplete quickly |
Webhook reference - potential data exfiltration
| 30 | - **Zapier** free plan does NOT support webhooks. You need a paid Zapier plan (Starter+) |
Webhook reference - potential data exfiltration
| 76 | ### 3. Set Up Webhook Service |
Webhook reference - potential data exfiltration
| 89 | 4. Add Discord webhook action |
Webhook reference - potential data exfiltration
| 93 | - Instant webhook triggers |
Webhook reference - potential data exfiltration
| 98 | 1. Create workflow at pipedream.com with HTTP webhook trigger |
Webhook reference - potential data exfiltration
| 99 | 2. Add Linear webhook pointing to your Pipedream URL |
Webhook reference - potential data exfiltration
| 116 | 2. Use webhook or bot integration for Discord |
Webhook reference - potential data exfiltration
| 203 | - Ensure `allowBots: true` if using webhook |
Access to hidden dotfiles in home directory
| 40 | mkdir -p ~/.clawdbot |
Access to hidden dotfiles in home directory
| 41 | echo "LINEAR_API_KEY=lin_api_xxxxx" > ~/.clawdbot/linear.env |
Access to hidden dotfiles in home directory
| 55 | Update `~/.clawdbot/linear-config.json`: |
Access to hidden dotfiles in home directory
| 206 | - Verify API key in `~/.clawdbot/linear.env` |
Access to .env file
| 41 | echo "LINEAR_API_KEY=lin_api_xxxxx" > ~/.clawdbot/linear.env |
Access to .env file
| 206 | - Verify API key in `~/.clawdbot/linear.env` |